Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa
File: 3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa (raw, json)
Hash identifier: mRrktVVzgp9WLxvIVxjZObNrqYbtAS12PHB9uq/IM8c=
Subject key identifier: 9D:82:86:5E:8E:9F:5F:FC:B2:65:6E:4B:82:45:CD:A8:51:33:B4:FF
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 68BEE34FC767B3C8925A95B0898CC9677C98023C
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 212259
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:be:e3:4f:c7:67:b3:c8:92:5a:95:b0:89:8c:c9:67:7c:98:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=9D82865E8E9F5FFCB2656E4B8245CDA85133B4FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:39:f9:68:2a:db:7b:f9:9a:22:0d:03:81:
2c:0d:49:8a:02:dc:11:8c:11:73:ce:34:93:a8:ec:
96:59:ae:a7:69:6b:99:46:c8:18:4b:95:a6:96:a7:
6d:78:ad:c4:75:8e:f1:09:49:3a:33:5b:d0:27:7e:
21:e2:1f:65:12:34:e3:f1:79:58:ec:7a:2b:bf:ba:
34:a5:2b:80:b8:1e:9c:aa:03:47:19:cc:95:ab:77:
28:5e:8c:f9:13:4b:f7:68:96:c9:94:4e:ec:25:3d:
e2:68:84:3a:71:ce:99:4e:11:61:1a:c0:d0:f9:9b:
ca:de:ea:fa:7f:20:00:9c:38:86:43:e7:17:93:8f:
4f:17:9d:27:47:b9:6c:9d:27:ff:a6:3e:ae:28:61:
5c:45:88:d1:4b:6c:d8:af:c7:9d:e5:4d:aa:cd:ec:
4e:ba:ac:1f:b2:8d:e2:f0:8b:0e:c4:1e:6a:fa:c8:
b9:c9:c6:f4:d2:ee:85:81:09:c5:f7:66:66:45:c9:
a3:32:8e:52:ef:e8:77:49:3f:25:37:d8:6f:93:d3:
78:16:71:c9:63:8e:6d:d6:b6:f1:da:ba:94:55:17:
81:43:f7:ce:6c:06:17:0b:56:87:91:40:48:19:f1:
fc:d9:dd:b8:c6:2b:1a:44:96:3c:53:d7:d7:cf:a7:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:82:86:5E:8E:9F:5F:FC:B2:65:6E:4B:82:45:CD:A8:51:33:B4:FF
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:16:15:63:10:d9:bd:e2:a0:5b:9d:55:15:7c:35:95:4a:d4:
86:8a:ee:b3:ac:90:15:c9:15:8b:d9:84:92:3a:7b:95:c8:54:
7d:45:de:40:f9:2e:82:30:25:44:9c:b0:23:60:8a:dd:8a:96:
3c:84:d9:5a:69:f6:b6:47:4a:b8:47:47:a0:20:5f:91:aa:41:
76:a3:45:0a:86:5c:8e:7d:12:2a:29:30:13:6e:e9:04:05:b0:
d8:b5:ed:48:29:53:86:b6:a8:f2:9b:d3:53:04:37:4e:5b:9f:
9f:b0:a6:c8:da:f3:f8:be:72:85:f7:a0:11:13:31:6d:64:6a:
c6:7e:85:7a:2f:2b:3e:43:8d:18:b2:7c:0d:5c:88:86:98:cf:
58:79:ee:ed:2c:6d:18:df:cd:46:1f:d2:f8:75:91:ee:52:53:
12:89:4e:a6:5f:61:4e:0a:9c:32:98:f8:c1:c3:df:81:cc:04:
97:66:00:1d:95:91:08:c8:76:3f:f3:b6:4d:0e:f0:95:76:25:
3c:06:21:3b:6e:79:8d:1f:1d:95:29:f2:4b:28:1c:77:5b:ad:
64:e4:ec:19:5c:07:87:47:d5:7d:62:a0:ef:13:b1:d1:a6:5a:
69:63:9e:b2:d2:f4:7e:7c:f5:97:db:0a:66:eb:e6:98:f0:2e:
a7:66:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:50 2026 by rpki-client